Business Email Compromise

Business email compromise (BEC) is a scam where a criminal pretends to be someone you trust over email, such as your boss, a supplier or a colleague, to trick you into sending money or sharing private information. It usually relies on a convincing message rather than a virus, which is why it often slips past security tools that are only looking for dangerous attachments.

A classic example is an email that looks like it is from a supplier saying their bank details have changed, so the next payment goes straight to the criminal. Because the trick is aimed at people rather than computers, the best defence is simple: check any request to move money or change payment details by phoning the person on a number you already know.